CCNA security course
Ipsec dosent support multicast, that is why GRE used with VPN, and as long as the GRE is not totally secure, the whole GRE. Encapsulation can be encapsulated in ipsec header so nlw we have both " mulitcast ability and security"
D is correct.
Explanation:
IPsec cannot encapsulate multicast, broadcast, or non-IP packets, and GRE cannot authenticate and encrypt packets. Based on the same principle, these applications encapsulate packets as IP packets using GRE and then transmit the packets over IPsec tunnels
IPsec over GRE (Generic Routing Encapsulation) is a mechanism that can be used to carry multicast traffic between remote sites and supports encryption. It combines the functionality of both IPsec and GRE to provide secure and efficient communication between sites. With IPsec over GRE, the multicast traffic is encapsulated inside a GRE tunnel, and the tunnel is then protected using IPsec encryption. This allows the multicast traffic to be securely transmitted over the public internet or other untrusted networks.
This video gives a good explanation
https://www.youtube.com/watch?v=ytAqv7qHGyU
TL:DR: GRE supports multicast but does not offer encryption. Therefore, use GRE over IPsec for encryption
This section is not available anymore. Please use the main Exam Page.200-301 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Raooff
Highly Voted 3 years, 12 months agodicksonpwc
Highly Voted 3 years, 3 months agogaber
2 years, 11 months ago[Removed]
Most Recent 8 months, 3 weeks agoStingVN
1 year, 6 months agoCiscoman021
1 year, 8 months agoPhonon
1 year, 11 months agovadiminski
3 years, 7 months agoMhatz
4 years, 1 month ago